Collected research

Blog on Gopherus Tool

SpyD3r · SpyClub · 13 August 2018

Gopherus builds gopher:// payloads that convert a server-side request forgery into remote code execution against back-end services. It covers MySQL, FastCGI, Memcached, Redis, Zabbix and SMTP, writing cron jobs or PHP web shells and abusing unsafe deserialization of cached data.

Record

Researcher

SpyD3r

Published by

SpyClub

Date

13 August 2018

Topic

Other

In the archive

• Collected in the 2018 research round

Related sources

• Gopherus

Tags

• ssrf
• rce
• deserialization
• tooling
• redis
• mysql
• smtp
• php
• command-injection
• owasp-a03-2021
• owasp-a08-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of SpyD3r, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.